CVE-2018-20441

Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and…

published December 25, 2018

CVSS
—
EPSS
1%
Percentile
71.5
In the wild
Unconfirmed
What it is

⚠️ An easily crafted SNMP request can expose your Wi-Fi credentials! It's like someone casually asking for your key code at a party. 🎉 Picture a friendly neighbor who always seems to have your Amazon package delivered to their door because they found out your code. That’s what's happening here! An attacker can request sensitive information without needing to break in – it’s all too easy and surprisingly sneaky. If attackers gain access to your Wi-Fi credentials, they could join your network, potentially intercept data, or launch further attacks. It’s like giving away the keys to your digital home, allowing them to roam freely without alerting anyone. The consequences could lead to unauthorized access to your devices and data, which could be absolutely devastating! 🔥

Put simply

Picture a friendly neighbor who always seems to have your Amazon package delivered to their door because they found out your code. That’s what's happening here! An attacker can request sensitive information without needing to break in – it’s all too easy and surprisingly sneaky. This vulnerability allows remote attackers to discover Wi-Fi credentials from Technicolor TC7200.TH2v2 devices through specific SNMP requests, leveraging the accessibility of certain OIDs without authentication.

What to do

If attackers gain access to your Wi-Fi credentials, they could join your network, potentially intercept data, or launch further attacks. It’s like giving away the keys to your digital home, allowing them to roam freely without alerting anyone. The consequences could lead to unauthorized access to your devices and data, which could be absolutely devastating! 🔥 To mitigate this risk, consider disabling SNMP on your devices if it’s not required. Ensure that your network is configured securely and update your firmware to the latest version, if available. Additionally, change your Wi-Fi credentials regularly to minimize potential exposure. You've got this! By taking these steps, you’ll boost your security and keep your network safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01367 · 71.5th percentile
Published
2018-12-25T15:00Z
EPSS history
Timeline
  • 25 DEC 15:00Z
    Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and…
    cvelistv5